VendorsOraclemiddleware_common_libraries_and_tools12.2.1.4.0
Vulnerabilities

Oracle Middleware Common Libraries 12.2.1.4.0

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

9CVEs
CVE-2022-23305
SQL injection in JDBC Appender in Apache Log4j V1
Published 2022-01-18 · Modified
9.8EPSS 0.665
CVE-2021-42575
The OWASP Java HTML Sanitizer before 20211018.1 does not properly enforce policies associated with the SELECT, STYLE, and OPTION elements.
Published 2021-10-18 · Modified
9.8EPSS 0.030
CVE-2021-23926
XMLBeans XML Entity Expansion
Published 2021-01-14 · Modified
9.1EPSS 0.062
CVE-2022-23307
A deserialization flaw in the Chainsaw component of Log4j 1 can lead to malicious code execution.
Published 2022-01-18 · Modified
9.0EPSS 0.544
CVE-2022-23302
Deserialization of untrusted data in JMSSink in Apache Log4j 1.x
Published 2022-01-18 · Modified
8.8EPSS 0.636
CVE-2021-42340
DoS via memory leak with WebSocket connections
Published 2021-10-14 · Modified
7.5EPSS 0.118
CVE-2021-37714
Crafted input may cause the jsoup HTML and XML parser to get stuck, timeout, or throw unchecked exceptions
Published 2021-08-18 · Modified
7.5EPSS 0.069
CVE-2021-30129
DoS/OOM leak vulnerability in Apache Mina SSHD Server
Published 2021-07-12 · Modified
6.5EPSS 0.030
CVE-2021-35043
OWASP AntiSamy before 1.6.4 allows XSS via HTML attributes when using the HTML output serializer (XHTML is not affected). This was demonstrated by a javascript: URL with &#00058 as the replacement for the : character.
Published 2021-07-19 · Modified
6.1EPSS 0.015